This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/N9M4-uBsVSV0SDeBeFhJV33pKhI.roa File: N9M4-uBsVSV0SDeBeFhJV33pKhI.roa (raw, json) Hash identifier: rpXq7ZRUtk8pnp7AGas+RN5ZHe+/QOPdXfZKY9hXSbU= Subject key identifier: 37:D3:38:FA:E0:6C:55:25:74:48:37:81:78:58:49:57:7D:E9:2A:12 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B0282067EF52C463F8DA22F2674F82CA6 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/N9M4-uBsVSV0SDeBeFhJV33pKhI.roa Signing time: Tue 09 Dec 2025 09:47:14 +0000 ROA not before: Tue 09 Dec 2025 09:47:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210512 IP address blocks: 91.195.125.0/24 maxlen: 24 91.229.112.0/23 maxlen: 23 213.108.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:82:06:7e:f5:2c:46:3f:8d:a2:2f:26:74:f8:2c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Dec 9 09:47:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=37d338fae06c552574483781785849577de92a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2c:eb:39:da:e9:7a:df:b7:df:3d:e8:e5:f5: df:22:fd:92:da:aa:c5:04:da:45:6c:f5:cf:1f:44: 2c:ff:da:82:18:94:c8:31:20:2b:51:c1:cd:28:f3: 11:50:af:7c:7c:24:be:cb:ff:16:08:5a:30:e0:7d: d5:8d:ef:00:9e:e1:a7:1a:2f:9b:1c:1b:76:de:ec: 40:24:95:7c:45:61:f3:82:25:6a:7e:97:bf:9c:b2: 08:66:07:ab:6f:9d:17:4d:a4:c3:26:f3:e6:df:1e: 4e:03:7c:aa:b2:18:a1:2d:4c:03:07:68:a5:95:2c: ac:87:f5:03:fd:50:a5:20:8b:ec:21:ed:01:cc:e7: dd:13:74:87:fd:08:78:af:b8:dc:49:f4:cc:19:39: 60:42:b6:b7:5c:b6:37:d8:71:90:53:c9:cc:ad:ed: 91:dd:24:64:a8:48:6d:f3:78:13:ba:96:71:b1:03: 17:a3:09:ac:11:ff:eb:09:27:b9:44:f9:08:07:e3: f4:31:5c:72:83:23:91:a2:77:46:5f:30:4b:11:32: 51:c8:54:6e:29:b6:41:82:81:1d:07:b1:77:c7:92: 13:fe:60:ec:74:23:af:fe:0b:86:38:35:35:b5:51: 22:32:15:59:51:df:8e:ea:b0:0c:06:4a:5e:af:44: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D3:38:FA:E0:6C:55:25:74:48:37:81:78:58:49:57:7D:E9:2A:12 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/N9M4-uBsVSV0SDeBeFhJV33pKhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.125.0/24 91.229.112.0/23 213.108.133.0/24 Signature Algorithm: sha256WithRSAEncryption 79:f5:8a:51:c9:db:f3:a0:2f:1c:53:80:38:3f:94:bb:6a:18: b2:10:6f:bb:f5:77:c5:8b:d3:cb:cf:91:6a:1c:cd:c1:fd:5b: df:ee:41:dd:c5:92:4b:b1:45:8d:02:bb:8f:f4:79:82:b7:70: 9b:ca:2f:bf:a6:67:7f:b9:85:3d:09:fe:99:4a:9a:fd:bf:4c: b9:60:1c:f1:20:f9:c9:d9:72:9c:1e:3c:bb:eb:b7:06:00:78: 6d:2f:03:7e:9c:f0:82:ad:eb:ba:58:dd:fd:c8:72:89:73:7d: b7:18:8f:01:37:fd:18:84:a0:55:a7:07:20:4d:fb:e7:6f:3e: cd:e4:27:5c:1c:ad:fe:b5:d7:42:e8:5a:ac:87:11:04:bc:e9: 08:1f:1f:56:ce:58:04:92:18:d9:65:35:c8:b2:d1:ad:73:8e: 2d:01:58:b5:ca:4a:55:47:ce:81:7b:81:36:5f:47:f8:36:1d: 8a:29:6c:b0:9e:e9:6f:11:80:d2:a4:99:27:15:57:c1:f9:63: 94:f7:08:a8:87:23:d9:c4:87:d1:f1:d2:aa:86:2b:0e:7f:83: 5e:e5:e5:a3:c9:65:d7:07:d2:f5:6d:6a:7f:26:fc:6d:13:50: 4d:0e:93:36:37:84:06:38:a8:c4:89:cd:ac:c8:95:c3:14:a6: 69:23:90:6e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsCggZ+9SxGP42iLyZ0+CymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMjA5MDk0NzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2QzMzhmYWUwNmM1NTI1NzQ0ODM3ODE3ODU4NDk1NzdkZTkyYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsizrOdrpet+33z3o5fXfIv2S2qrF BNpFbPXPH0Qs/9qCGJTIMSArUcHNKPMRUK98fCS+y/8WCFow4H3Vje8AnuGnGi+b HBt23uxAJJV8RWHzgiVqfpe/nLIIZgerb50XTaTDJvPm3x5OA3yqshihLUwDB2il lSysh/UD/VClIIvsIe0BzOfdE3SH/Qh4r7jcSfTMGTlgQra3XLY32HGQU8nMre2R 3SRkqEht83gTupZxsQMXowmsEf/rCSe5RPkIB+P0MVxygyORondGXzBLETJRyFRu KbZBgoEdB7F3x5IT/mDsdCOv/guGODU1tVEiMhVZUd+O6rAMBkper0SjoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDfTOPrgbFUldEg3gXhYSVd96SoSMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvTjlNNC11QnNWU1YwU0RlQmVGaEpWMzNwS2hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8N9AwQB W+VwAwQA1WyFMA0GCSqGSIb3DQEBCwUAA4IBAQB59YpRydvzoC8cU4A4P5S7ahiy EG+79XfFi9PLz5FqHM3B/Vvf7kHdxZJLsUWNAruP9HmCt3Cbyi+/pmd/uYU9Cf6Z Spr9v0y5YBzxIPnJ2XKcHjy767cGAHhtLwN+nPCCreu6WN39yHKJc323GI8BN/0Y hKBVpwcgTfvnbz7N5CdcHK3+tddC6FqshxEEvOkIHx9WzlgEkhjZZTXIstGtc44t AVi1ykpVR86Be4E2X0f4Nh2KKWywnulvEYDSpJknFVfB+WOU9wiohyPZxIfR8dKq hisOf4Ne5eWjyWXXB9L1bWp/JvxtE1BNDpM2N4QGOKjEic2syJXDFKZpI5Bu -----END CERTIFICATE-----Generated at Sat Dec 13 13:31:52 2025 by rpki-client